Open to opportunities

Musa Afandiyev

@musaafandiyev

Network & infrastructure engineer specializing in network security, firewall automation, and observability for resilient enterprise operations.

Azerbaijan

Message

What I'm looking for

I’m looking for a hands-on role where I can secure and scale enterprise networks—using Ansible/AWX and Python automation, strong firewall/VPN controls, and Grafana/Graylog/Zabbix observability to improve reliability and auditability.

I’m a network and infrastructure engineer focused on network security and firewall management, bringing Linux administration and monitoring into day-to-day operations. I prioritize secure access control and operational consistency across enterprise environments.

In my roles, I automate large-scale network and firewall operations with Ansible/AWX and Python—supporting tasks like bulk address-object creation, policy updates, and VPN-user provisioning. I also led a centralized LDAP/MFA VPN authentication migration, partnering cross-functionally to improve lifecycle management, auditability, and access security.

I strengthen observability by building data pipelines and dashboards with Python/PostgreSQL/Grafana and Graylog, including threshold alerts and centralized investigation views. From AWX integrations to hands-on lab work (high-availability and monitoring), I enjoy turning complex infrastructure into reliable, maintainable systems.

Experience

Work history, roles, and key accomplishments

Current

Network Administrator

Current

Avicom LLC

May 2026 - Present (2 months)

Automates firewall and network operations using Ansible/AWX and Python, including bulk address-object creation, policy updates, and VPN-user provisioning. Migrates VPN users to centralized Active Directory/LDAP authentication with MFA and supports automation via AWX with dynamic inventory workflows backed by PostgreSQL and GitLab.

Ansible AWX Python Active Directory LDAP MFA PostgreSQL Gitlab Automation

Network Administrator & Security

Iktex LLC

Sep 2024 - May 2026 (1 year 8 months)

Administers firewalls and improves policy/rule hygiene through optimization and address-object cleanup. Builds TACACS+ administration controls with Cisco ISE and delivers Graylog, Grafana, and Python-based inventory/telemetry pipelines to monitor and automate network operations at scale.

Firewall Administration Policy Optimizer TACACS+Graylog Python PostgreSQL Grafana Ansible ACLs SSH and Telnet Exposure

Network Operations Intern

Ministry of Internal Affairs of the Republic of Azerbaijan

Jul 2024 - Aug 2024 (1 month)

Monitors core, backbone, and distribution-layer devices using an enterprise monitoring platform. Reviews device status and logs with read-only TACACS+ access and prepares incident and availability reports.

Network Monitoring TACACS+Incident Reports